firewall: dmz - revert back, rule should be inserted before zone_wan_src_REJECT